{"total":89,"rows":[{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2404.13733","title":"Elucidating the Design Space of Dataset Condensation","created":"2024-04-21","cited_by_count":40,"area":null},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2503.10635","title":"A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1","created":"2025-03-13","cited_by_count":37,"area":"mllm"},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2403.15365","title":"A Transfer Attack to Image Watermarks","created":"2024-03-22","cited_by_count":27,"area":null},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2509.16645","title":"ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents","created":"2025-09-20","cited_by_count":23,"area":"lr"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2404.11207","title":"Exploring the Transferability of Visual Prompting for Multimodal Large Language Models","created":"2024-04-17","cited_by_count":15,"area":"mllm"},{"id":"2305.05392","title":"Sharpness-Aware Minimization Alone can Improve Adversarial Robustness","created":"2023-05-09","cited_by_count":14,"area":null},{"id":"2404.18191","title":"Exploring the Robustness of In-Context Learning with Noisy Labels","created":"2024-04-28","cited_by_count":14,"area":null},{"id":"2408.10571","title":"Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models","created":"2024-08-20","cited_by_count":14,"area":"diffusion"},{"id":"2401.08734","title":"Bag of Tricks to Boost Adversarial Transferability","created":"2024-01-16","cited_by_count":12,"area":null},{"id":"2404.13752","title":"Adversarial Representation Engineering: A General Model Editing Framework for Large Language Models","created":"2024-04-21","cited_by_count":12,"area":"mechinterp"},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2509.21029","title":"FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction","created":"2025-09-25","cited_by_count":11,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2412.09921","title":"FaceShield: Defending Facial Image against Deepfake Threats","created":"2024-12-13","cited_by_count":8,"area":null},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2410.06851","title":"Understanding Model Ensemble in Transferable Adversarial Attack","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2602.17645","title":"Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting","created":"2026-02-19","cited_by_count":6,"area":"mllm"},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2505.23518","title":"TRAP: Targeted Redirecting of Agentic Preferences","created":"2025-05-29","cited_by_count":5,"area":"lr"},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2405.12786","title":"Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective","created":"2024-05-21","cited_by_count":4,"area":"safety"},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2504.10804","title":"Harnessing the Computation Redundancy in ViTs to Boost Adversarial Transferability","created":"2025-04-15","cited_by_count":4,"area":null},{"id":"2508.15370","title":"Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation","created":"2025-08-21","cited_by_count":4,"area":"mllm"},{"id":"2604.09258","title":"Nexus: Same Pretraining Loss, Better Downstream Generalization via Common Minima","created":"2026-04-10","cited_by_count":4,"area":null},{"id":"2307.06608","title":"MF-CLIP: Leveraging CLIP as Surrogate Models for No-box Adversarial Attacks","created":"2023-07-13","cited_by_count":3,"area":null},{"id":"2506.12706","title":"NAP-Tuning: Neural Augmented Prompt Tuning for Adversarially Robust Vision-Language Models","created":"2025-06-15","cited_by_count":3,"area":"mllm"},{"id":"2507.00817","title":"CAVALRY-V: A Large-Scale Generator Framework for Adversarial Attacks on Video MLLMs","created":"2025-07-01","cited_by_count":3,"area":"lr"},{"id":"2511.15435","title":"HV-Attack: Hierarchical Visual Attack for Multimodal Retrieval Augmented Generation","created":"2025-11-19","cited_by_count":3,"area":"mllm"},{"id":"2511.20494","title":"Adversarial Confusion Attack: Disrupting Multimodal Large Language Models","created":"2025-11-25","cited_by_count":3,"area":"mllm"},{"id":"2308.03321","title":"AFN: Adaptive Fusion Normalization via an Encoder-Decoder Framework","created":"2023-08-07","cited_by_count":2,"area":null},{"id":"2503.00917","title":"AMUN: Adversarial Machine UNlearning","created":"2025-03-02","cited_by_count":2,"area":"safety"},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2505.18097","title":"Towards more transferable adversarial attack in black-box manner","created":"2025-05-23","cited_by_count":2,"area":"diffusion"},{"id":"2505.23266","title":"Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusion","created":"2025-05-29","cited_by_count":2,"area":"mllm"},{"id":"2603.16960","title":"Adversarial attacks against Modern Vision-Language Models","created":"2026-03-17","cited_by_count":2,"area":"mllm"},{"id":"2308.10743","title":"Enhancing Adversarial Attacks: The Similar Target Method","created":"2023-08-21","cited_by_count":1,"area":null},{"id":"2409.04208","title":"Learning to Learn Transferable Generative Attack for Person Re-Identification","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2410.05136","title":"LOTOS: Layer-wise Orthogonalization for Training Robust Ensembles","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2506.12336","title":"Benchmarking the Trustworthiness in Multimodal LLMs for Video Understanding","created":"2025-06-14","cited_by_count":1,"area":"mllm"},{"id":"2506.21874","title":"On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling","created":"2025-06-27","cited_by_count":1,"area":"mllm"},{"id":"2508.09230","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","created":"2025-08-12","cited_by_count":1,"area":"mllm"},{"id":"2509.25533","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","created":"2025-09-29","cited_by_count":1,"area":"mllm"},{"id":"2510.09849","title":"Text Prompt Injection of Vision Language Models","created":"2025-10-10","cited_by_count":1,"area":"mllm"},{"id":"2604.17318","title":"When Background Matters: Breaking Medical Vision Language Models by Transferable Attack","created":"2026-04-19","cited_by_count":1,"area":"mllm"},{"id":"2605.07447","title":"Sparse Autoencoders as Plug-and-Play Firewalls for Adversarial Attack Detection in VLMs","created":"2026-05-08","cited_by_count":1,"area":"mllm"},{"id":"2403.10562","title":"Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2409.02430","title":"Transfer-based Adversarial Poisoning Attacks for Online (MIMO-)Deep Receviers","created":"2024-09-04","cited_by_count":0,"area":null},{"id":"2412.05351","title":"Towards Predicting the Success of Transfer-based Attacks by Quantifying Shared Feature Representations","created":"2024-12-06","cited_by_count":0,"area":null},{"id":"2412.14080","title":"On the Robustness of Distributed Machine Learning against Transfer Attacks","created":"2024-12-18","cited_by_count":0,"area":null},{"id":"2502.01262","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","created":"2025-02-03","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2504.18594","title":"RaPA: Enhancing Transferable Targeted Attacks via Random Parameter Pruning","created":"2025-04-24","cited_by_count":0,"area":null},{"id":"2506.06729","title":"Mitigating Object Hallucination via Robust Local Perception Search","created":"2025-06-07","cited_by_count":0,"area":"mllm"},{"id":"2602.02536","title":"From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderation","created":"2026-01-28","cited_by_count":0,"area":"safety"},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2603.25244","title":"Fast Preemptive Robustification: High-Frequency Response Anti-Aligns Shared Vulnerability","created":"2026-03-26","cited_by_count":0,"area":null},{"id":"2604.25102","title":"One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations","created":"2026-04-28","cited_by_count":0,"area":"mllm"},{"id":"2606.07706","title":"MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models","created":"2026-06-05","cited_by_count":0,"area":"mllm"},{"id":"2606.10571","title":"Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction","created":"2026-06-09","cited_by_count":0,"area":"mllm"},{"id":"2607.27465","title":"IGME: Efficient Chained Method Ensemble for Transferable Semantic Segmentation Attacks","created":"2026-07-29","cited_by_count":0,"area":null},{"id":"2608.11815","title":"Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2609.27022","title":"Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Study","created":"2026-09-22","cited_by_count":0,"area":null}],"next_cursor":null}